Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232382e302f32342d3234203d3e20313437323837.roa
File:                     3230352e3233342e3232382e302f32342d3234203d3e20313437323837.roa (raw, json)
Hash identifier:          TvFUvtXYdEoLnPINLYRD7a50iIg1qs3w78Cf7Yi8mOc=
Subject key identifier:   62:A3:AD:0D:6F:81:4E:45:CC:0A:0F:2A:63:D8:A8:AA:9F:E1:2A:A3
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       7E42A70451D8A668E0E1F4C728B9C929E66C31F8
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232382e302f32342d3234203d3e20313437323837.roa
Signing time:             Tue 18 Apr 2023 11:51:46 +0000
ROA not before:           Tue 18 Apr 2023 11:46:46 +0000
ROA not after:            Tue 16 Apr 2024 11:51:46 +0000
asID:                     147287
IP address blocks:        205.234.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:42:a7:04:51:d8:a6:68:e0:e1:f4:c7:28:b9:c9:29:e6:6c:31:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Apr 18 11:46:46 2023 GMT
            Not After : Apr 16 11:51:46 2024 GMT
        Subject: CN=62A3AD0D6F814E45CC0A0F2A63D8A8AA9FE12AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ed:5b:b8:f9:b2:65:99:68:53:a2:9c:63:22:
                    65:51:74:1f:dc:85:e6:2b:10:7a:69:f5:c4:b8:34:
                    5a:12:f1:11:26:e6:28:6e:dd:99:00:73:05:f9:fc:
                    ed:9e:5f:92:37:28:f8:c8:08:dd:af:bf:4f:7d:21:
                    eb:1d:8c:4f:5e:2b:96:29:cf:3f:d6:24:fb:84:53:
                    79:11:3e:1a:00:86:26:3f:e0:49:d6:30:96:ff:20:
                    60:5b:4c:c8:c8:e2:6e:2a:73:14:1b:6b:5a:79:19:
                    03:a1:bc:d5:56:01:cd:aa:0b:ed:76:e7:c1:4f:25:
                    5b:d7:0c:eb:52:da:3f:bc:3d:33:67:5f:5b:7c:6b:
                    a8:da:fa:dd:46:d4:23:58:a0:9e:81:8c:6f:8e:ec:
                    4d:10:78:06:5b:76:c8:fd:f3:ec:13:16:44:fd:70:
                    aa:0d:1c:f8:08:5a:72:8a:52:92:32:4b:83:ba:e0:
                    12:11:3c:d1:fb:bb:b3:70:cb:53:67:f1:2b:12:95:
                    8a:f2:bf:cf:14:75:19:bb:e6:c0:af:78:51:cd:03:
                    ce:43:26:ee:f7:27:ae:63:08:c0:8f:e4:ac:76:38:
                    47:ba:76:73:92:c8:ba:bb:3c:e1:f3:63:94:07:6d:
                    97:eb:80:a9:55:5f:c7:fc:8e:eb:e0:d8:85:cb:61:
                    4b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A3:AD:0D:6F:81:4E:45:CC:0A:0F:2A:63:D8:A8:AA:9F:E1:2A:A3
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/3230352e3233342e3232382e302f32342d3234203d3e20313437323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:0c:c8:c8:d3:03:93:7f:22:4a:b5:44:dc:92:79:7d:f9:
         77:98:db:03:c1:5b:cf:4a:a2:b6:3b:aa:66:2f:3c:e3:5a:72:
         30:da:d4:6c:c2:2d:53:61:a8:5c:0e:8c:3f:02:1b:0b:bc:bf:
         42:2a:ff:82:fd:a7:24:56:68:86:6e:19:86:3c:04:c6:a7:f0:
         ec:7d:33:7c:67:40:fd:aa:e0:8e:e4:ef:84:19:55:d8:77:a3:
         35:1e:a6:a9:83:a5:07:71:75:00:3c:46:39:4e:91:0f:6c:cf:
         5d:a8:7e:b9:83:ef:c6:d5:12:67:9d:3b:97:67:94:d0:d0:17:
         82:3c:c0:02:80:88:eb:fd:89:5b:4a:a8:4c:56:f8:95:03:2d:
         ba:cc:c6:58:95:04:55:0f:c4:c1:2e:e3:9d:b0:b2:c8:95:db:
         8c:9c:d9:10:86:5f:f0:f7:b9:50:60:74:bc:1a:43:e2:2a:fa:
         40:b8:be:57:73:b2:2f:2e:56:e3:32:4a:86:c3:ba:58:d0:92:
         64:f1:0c:e7:08:99:ba:79:fb:c6:88:b4:1f:79:e1:9d:70:2d:
         74:5a:95:57:12:5a:3b:93:60:aa:69:d1:e5:74:90:66:97:2c:
         05:73:b9:b9:1d:e7:1f:7e:66:a0:36:76:e4:b3:72:4e:dd:fa:
         e5:09:85:99
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUfkKnBFHYpmjg4fTHKLnJKeZsMfgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjk2MjZjMmUwYjk2NGVkNWU4YmE2YTZmM2VkMGZkNjM2
Y2YzNjQ1ZDZjY2I2MTIzYjkwHhcNMjMwNDE4MTE0NjQ2WhcNMjQwNDE2MTE1MTQ2
WjAzMTEwLwYDVQQDEyg2MkEzQUQwRDZGODE0RTQ1Q0MwQTBGMkE2M0Q4QThBQTlG
RTEyQUEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7e1buPmyZZlo
U6KcYyJlUXQf3IXmKxB6afXEuDRaEvERJuYobt2ZAHMF+fztnl+SNyj4yAjdr79P
fSHrHYxPXiuWKc8/1iT7hFN5ET4aAIYmP+BJ1jCW/yBgW0zIyOJuKnMUG2taeRkD
obzVVgHNqgvtdufBTyVb1wzrUto/vD0zZ19bfGuo2vrdRtQjWKCegYxvjuxNEHgG
W3bI/fPsExZE/XCqDRz4CFpyilKSMkuDuuASETzR+7uzcMtTZ/ErEpWK8r/PFHUZ
u+bAr3hRzQPOQybu9yeuYwjAj+SsdjhHunZzksi6uzzh82OUB22X64CpVV/H/I7r
4NiFy2FLGQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGKjrQ1vgU5FzAoPKmPYqKqf
4SqjMB8GA1UdIwQYMBaAFE8GHzq5hjgo92M+vEYwD5t+h3q8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODY5M2YwNjAwMTg2YzZlN2ZkOGQzNjYwLzAv
NEYwNjFGM0FCOTg2MzgyOEY3NjMzRUJDNDYzMDBGOUI3RTg3N0FCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2FkOWIzMDEwLTMxMTYtNDY0ZS04YzU4LTk1ODY1MDBmMTcwMS82OTYy
NmMyZTBiOTY0ZWQ1ZThiYTZhNmYzZWQwZmQ2MzZjZjM2NDVkNmNjYjYxMjNiOS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmM2
ZTdmZDhkMzY2MC8wLzMyMzAzNTJlMzIzMzM0MmUzMjMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzczMjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADN6uQwDQYJKoZIhvcN
AQELBQADggEBACqmDMjI0wOTfyJKtUTcknl9+XeY2wPBW89KorY7qmYvPONacjDa
1GzCLVNhqFwOjD8CGwu8v0Iq/4L9pyRWaIZuGYY8BMan8Ox9M3xnQP2q4I7k74QZ
Vdh3ozUepqmDpQdxdQA8RjlOkQ9sz12ofrmD78bVEmedO5dnlNDQF4I8wAKAiOv9
iVtKqExW+JUDLbrMxliVBFUPxMEu452wssiV24yc2RCGX/D3uVBgdLwaQ+Iq+kC4
vldzsi8uVuMySobDuljQkmTxDOcImbp5+8aItB954Z1wLXRalVcSWjuTYKpp0eV0
kGaXLAVzubkd5x9+ZqA2duSzck7d+uUJhZk=
-----END CERTIFICATE-----